Considering Facebook has ignored the explicit privacy settings in the past exposing 'private' information, I think it's more a question of them being untrustworthy than having poor security.